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1 Introduction 

I— I Traditional epistemic logic can be seen as a particular branch of modal logic. Its semantics 

is defined in terms of Kripke models, and philosophical principles about knowledge (e.g. fac- 
hJ tivity: Kip — t- (p) are shown to correspond to properties of the epistemic accessibility relation 

^ (e.g. reflexivity) . By adding another (doxastic) accessibility relation, also belief can be treated 

i_i in this framework. Belief is not assumed to be factive, but at least consistent (-iS_L), which 

^ corresponds to requiring the doxastic accessibility relation to be serial instead of reflexive. In 

^ this extended framework, one can study the interaction between knowledge and belief (e.g. is 

Kif — )• Bip a valid principle?); cf. [SI [8]. Furthermore, since this framework is still 'just' 
a (multi-)modal logic, it inherits the mathematically well-developed model theory of modal 
(N logic- 

However, it is well-known that dynamic phenomena cannot be captured in this framework; 

O cf. section 3.1 of [7]. To remedy this, epistemic plausibility models have been introduced (tech- 

nical details will be presented later). In these models, one can again study knowledge, belief 
• • (and even other cognitive propositional attitudes), and their various interactions. Further- 

more, this framework provides a realistic model of various dynamic phenomena, and thus 

^ solves the main problem of the previous approach. However, because epistemic plausibility 

models are much richer structures than Kripke models, they do not straightforwardly inherit 
the model-theoretical results of modal logic. Therefore, while epistemic plausibility structures 
are well-suited for modeling purposes, an extensive investigation of their model theory has 
been lacking so far. 

The aim of the present paper is to fill exactly this gap, by initiating a systematic explo- 
ration of the model theory of epistemic plausibility models. Like in 'ordinary' modal logic, the 
focus will be on the notion of bisimulation — it turns out that finding the right generalization 
of this notion is not a trivial task. In Section [2| we introduce epistemic plausibility models 
and discuss some important operators which can be interpreted on such models, and their 

*I wish to thank Johan van Benthem and Davide Grossi for their valuable comments on earlier versions of 
this paper. This research was funded by the University of Leuven's Formal Epistemology Project. 
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dynamic behaviour. In Section [3| we define various notions of bisimulations (parametrized by 
a language C) and sliow that i2-bisimilarity implies ^-equivalence. We establish a Hennesy- 
Milner type theorem, and prove two undefinability results — thus shedding some light on 
the formal relationships between the various operators that can be interpreted on epistemic 
plausibility models. The notion of bisimulation for conditional belief, however, turns out to 
be unsatisfactory for several reasons. In Section |4j we discuss these reasons and explore two 
possible solutions: adding a modality to the language, and putting extra constraints on the 
models. In Section [5| we establish some results about the interaction between bisimulation 
and dynamic model changes. 

From a broader perspective, this paper can be seen as a reaction against a widespread 
trend in the technical modal logic literature (already since the 1960's), viz. the inclination to 
focus almost exclusively on the model theory of 'classical' single-quantifier modalities, while 
neglecting more-quantifier modalities (which are of central importance for applications in 
game theory, AI, philosophy, and linguistics). 

Finally, it should be noted that this paper is mainly exploratory in nature. Especially with 
respect to the problem of finding bisimulations for conditional belief, the aim is to provide a 
(partial) map of the wide landscape of possible solutions, rather than to argue for the ultimate 
correctness of one of them. 

2 Epistemic plausibility models 

We now introduce epistemic plausibility models. Let G be a non-empty set, whose elements 
will be called agents. Throughout this paper, we will keep the set of agents fixed, so that it 
can almost always be left implicit. Likewise, we assume that Prop is a (countably infinite) 
set of proposition letters, which will also be kept fixed throughout the paper. 

Definition 1. An epistemic plausibility model is a structure M = {W, {~j}ieG) {^j.^li^c^' 
where is a non-empty set of states, ^i'^W x W is the epistemic accessibility relation for 
agent i, <i^w '^W xW is the plausibility order for agent i at state w, and V : Prop — )• p(VF) 
is a valuation. 

As usual, w ~j f is to be read as: "agent i cannot epistemically distinguish between states 
w and u". We assume this relation to be an equivalence relation. Furthermore, w <i^s v is to 
be read as: "at state s, agent i considers w at least as plausible as v". We take this relation 
to be a well-founded pre-orderj^ Also note that this relation is not only dependent on agents, 
but also on states: it is possible for agent i to have different plausibility orderings at different 
states (from Section |4] onwards, more constraints will be placed on this state-dependency). 

Various epistemic and doxastic notions can be interpreted on epistemic plausibility models. 
The three most important ones are: (i) Kiip {i knows that ip), (ii) Bf^ip {i believes that ip, 
conditional on a), and (iii) B^ip [i safely believes that ip). 'Normal' belief can be defined in 
terms of conditional belief, by putting Bitp := BJ ip. 

We abbreviate [w\r^^ := {v ^ W \ w v} (the ~i-equivalence class of state w G W). The 
semantics for the notions above can now be stated as follows: 

Definition 2. Consider an epistemic plausibility model M and state w\ then 

^For any state s £ W and set X C W , we define Min< . ^ (X) := {x £ X \ \/y £ X : y <i,s x ^ x <i^s y} 
(the set of <i,iu-minimal elements of X). That <i^s is a weU- founded pre-order means that it is reflexive and 
transitive, and that for any X (Z W such that X 7^ 0, also Min<; si^) 7^ ^- 
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• M, w 1= Kicp iff \/v G [w]^^ :M,v \= if 

• M, w 1= B^if iS^vGW :ve Mm<,,„, (H^ n [w]^,) ^M,v^ip 

• M, w 1= iff G [li;]^- : v <i,^ it; =^> M, ^; |= (/? 

We now turn to tlie dynamics. In tliis paper, we will focus on two specific dynamic 
phenomena: public announcement (hard information) and radical upgrade (soft information). 
Public announcement of a formula ip in an epistemic plausibility model M simply removes all 
-i(/?-states from the model. Radical upgrade with ip, on the other hand, makes all 99-states 
more plausible than all -K/7-states, and leaves everything within these two zones untouched. 
Formally, this looks as follows: 

Definition 3. Consider an epistemic plausibility model M = (VF, {~j}ieG; {^i.wI^'g^! ^) 
and a formula (p. We now define the following epistemic plausibility models: 

. M!^ = {W^-^, {^rheo, {<^;::jrif"'y-^)^ where 

- W'v = 

4^ ■■= ~. n ([(^r X I^pD for any f G G 

- <if^ := <i,w n (M" X M^) for any i E G and w £ W''^ 

- y!v(p) := y(p) n {(pf^ for any p € Prop 

.Mii^ = {W^^, {<tjriG''\V^^), where 

- := ~j for any i £ G 

- <t ■■= ( n a^r X iv^D) u ( n (h^r x ^^d) u (^r x h^r) 

for any i e G and w G VF''^'^ 

- yi^'^(p) := V{p) for any p G Prop 

In order to be able to talk about these new models in the object language, we add operators 
[l(p] and Lp] . Hence, the full language C{K, B^, B^, !, ff) has the following Backus-Naur Form 
(BNF)g 

ip ::= p \ ^(p \ (p Aip \ Knp \ Bfip \ Bfip \ [A]ip 
A ::= ! 99 I 11 99 

We now link up the models and the language by defining the semantics for the two dynamic 
modalities. Note that since public announcement is assumed to be truthful, it works with a 
precondition; this is not the case for radical upgrade. 

Definition 4. Consider an epistemic plausibility model M and state w\ then 

• M, w 1= \^.ip\'4j iff (if M,w\= (p then M\(p, k; ^ V) 

^Of course, one can also study more restricted languages. BNF's for such restricted languages can easily 
be obtained from the BNF for the full language. 
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• M, w 1= [ft lp\iIj iff M ft 97, tt; ^ V 

Finally, dynamic epistemic/doxastic logics are constructed using the well-known modu- 
lar approach: (i) one starts by taking (an axiomatization of) some static base logic (in a 
sufficiently rich language, so that step (iii) can be done successfulljQ , (ii) then one adds 
dynamic operators to this logic and (iii) finally, one provides a sound set of reduction axioms, 
which allow each formula in the dynamic language to be rewritten as an equivalent formula 
in the static language. Because of this final step, completeness of the dynamified logic is 
reduced to completeness of the static base logic. It also shows that the dynamic language 
C{K, B'^, B~^, !, ft) is equally expressive as the static language C{K, B'^, B~^). 

We illustrate this methodology by providing the most important reduction axioms for pub- 
lic announcement and radical upgrade, viz. those in which the epistemic/doxastic operators 
are being rewritten: 

Fact 5. The following are all sound with respect to epistemic plausibility models: 
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3 Bisimulation for epistemic plausibility models 

We now start our investigation of the model theory of epistemic plausibility models. The 
focus will be on the notion of bisimulation, which is also central in the model theory of 
Kripke models. Since we want to explore bisimulation for various languages, we make it into 
a parametrized notion, so that each language has its own notion of bisimulation, which 'does 
what it needs to do, and nothing more'. 

Below are the definitions of X-bisimulation, i?^-bisimulation and iJ'^-bisimulation. Since 
Ki is just the universal modality for ~j, the notion of ii'-bisimulation is that of regular bisim- 
ulation from modal logic. The notion of i?^-bisimulation is a straightforward generalization. 
The notion of S^-bisimulation, however, is much more intricate, since it involves universally 
quantifying over all formulas of the language C{B~^). We will return to this issue in later 
sections. 

Definition 6. Given epistemic plausiblity models M = {W, {~j}jeG, {<i,u;}l^G^, V) and M' = 
{W\ {~-}ieG, {<'i,w')7^G^' ^^') ; a relation Z (^W xW isa K -bisimulation iff 

• if (w, w') G Z, then for all atoms p: w £ V{p) w' £ V'{p) 

• if {w, w') G Z and w ~i then there is a G W' such that (v, v') G Z and w' ~^ v' 

• if {w, w') G Z and w' ~^ v', then there \s a, v £W such that (f , v') G Z and w v 

^For example, if the language contains radical upgrade and safe belief operators, then it should also contain 
the knowledge operator, so that the reduction axiom is expressible; cf. Factlsj 
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Definition 7. Given epistemic plausiblity models M = {W, {~j}jeG, {<i,w}Ti^ , V) and M' = 
{W', {~-}ieG, {<i.^'}reG^'' ; a relation Z xW isa B+ -bisimulation iff 

• if {w, w') £ Z, then for all atoms p: w £ Vip) w' G V'{p) 

• if {w,w') £ Z and w v and v <i^w w, then there is a v' & W such that {v,v') £ Z 
and w' v' and t>' <'■ ^, w' 

• if {w,w') £ Z and w' ~'j and f ' <'• w', then there is a v G W such that {v,v') E Z 
and w V and w <j^u, tt; 

Definition 8. Given epistemic plausiblity models M = {W, {~j}jeG, {<i,«;}l^G^, 1^) and M' = 
{W', {~-}ieG, {<i.^'}reG^'' ; a relation Z C x H^' is a B" -bisimulation iff 

• if {w,w') G Z, then for all atoms p: w £ y{p) <^ w' £ V'{p) 

• for all formulas a G C{B'^): if {w,w') G Z and f G Min<. (|a|^n then there is 
av' such that {v, v') G Z and v' G Min</ (H^' n [w']^,) 

• for all formulas a G C{B''): if (tt;,tt;') G Z and G Min</ {iaf^' n K]^')> then there 
is a u G such that {v,v') G Z and v £ Min<^_^([[a]]^ n H^J 

The following theorem shows that these are the 'right' notions, since they allow us to 
establish a characteristic feature of bisimulation: bisimilarity implies modal equivalence. 

Theorem 9. Consider two epistemic plausiblity models M = (VF, {~i}ieG; ^) 
and M' = {W, {-'JieG, {<i,^'}TeG^' ,y') , and a relation ZQWxW. 

1. If Z is a ii'-bisimulation, then for all if G C{K) and for all {w,w') G Z, it holds that 
M, w 1= (/? M', w' 1= if. 

2. If Z is a i3+-bisimulation, then for all 99 G C{B^) and for all {w,w') G Z, it holds that 
M,w\= ip 4^ M', w' 1= ip. 

3. If Z is a iJ'^-bisimulation, then for all (p G C{B^) and for all {w,w') G Z, it holds that 
M, w 1= 44> M', w' 1= 

Proof. Each of these three statements is easily proved by induction on the complexity of ip. 
To illustrate this, we treat the cases for the epistemic/doxastic modality. 

1. Suppose that {w, w') G Z and M, w \= Ki(p; we show that also M', w' |= Ki(p. Consider 
an arbitrary v' G W and suppose that w' ~^ v' . By Definition [6| there exists a v £ W 
such that {v, v') G Z and w ~i Since M, w |= -fCic/? and w ~i t>, we get M, u ^ Since 
{v,v') G Z, we get by the induction hypothesis that also M',v' |= ip. The other direction is 
completely analogous. 

2. Suppose that {w, w') G Z and M, w |= -Bj^V'! show that also M', tf' |= B^ip. Consider 
an arbitrary v' G W and suppose that w' ~^ and v' <[^: w' . By Definition j7| there exists 
a V £ W such that (f , v') G Z and w v and w <j^^ tt;. Since M, w |= -Bj^y? and w v and 

w, we get M, v ^ v?. Since {v,v') G Z, we get by the induction hypothesis that also 
M',u' \= ip. The other direction is completely analogous. 
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3. Suppose that {w, w') G Z and M, w |= Bfip; we show that also M', w' |= Bf'ip. Consider 
an arbitrary v' S W and suppose that v' £ Min</ ([aj"' n [w'U>). Since Bfip G £(5'=), 

also a G £,{B'^); hence, by Definition [sj there exists & v £ W such that {v,v') G Z and 
G Mm<^^^{laf^ n Since M.-u; ^ Bfip and G Min<,_^ ([[a]]'^ n H^J, we get 

M, ^ 93. Since {v,v') G .Z', we get by the induction hypothesis that also M',v' |= if. The 
other direction is completely analogous. □ 

Using these separate notions of bisimulations, we can now introduce bisimulations for 
languages which have more than just one of the operators K/B'^/B'^ in a modular way 
(although conditional belief complicates matters a little bit). Obviously, these combined 
notions lead to results analogous to Theorem [oj we state just two of these (without proof) as 
Theorem 11, for future reference. 

Definition 10. Consider epistemic plausiblity models M = {W, {<j,to}i^^5 V) and 

M' = {W, W,}ieG, {<'i,^>}TeG^' , V) and a relation ZCWxW. 

• Z is a {K, i?^}-bisimulation iff Z is a i^-bisimulation and a i?+-bisimulation 

• Z is a {K, S'^}-bisimulation iff Z is a i^-bisimulation and a i^'^-bisimulation, with the 
universal quantifiers in Definition [s] ranging over C{K, B'^) (instead of just over C{B'^)) 

• Z is a {K, B^ , i?^}-bisimulation iff Z is a X-bisimulation, a i?^-bisimulation, and a B'^- 
bisimulation, with the universal quantifiers in Definition [s] ranging over C{K,B~^,B^) 
(instead of just over C{B^)) 

Theorem 11. Consider two epistemic plausiblity models M = (VF, {~j}i6G, {<i,w}^|)^, ^) 
and M' = {W, {-'JieG, {<i,^'}%G^' ,y') , and a relation ZQWxW. 

1. If Z is a {il', iJ'^j-bisimulation, then for all ip G C{K^B^) and for all {w,w') G Z, it 
holds that M, w \= if <^ M' , w' \= (p. 

2. If Z is a {X, i?+}-bisimulation, then for all (/? G C{K,B^) and for all {w,w') G Z, it 
holds that M,w if <^M\w' if. 

One can also wonder about the converse direction of theorems such as Theorem [ill if 
M, ij; 1= (/9 <^ M',u;' |= (p for all ip G C{K,B^), then is there always a {ii', S'^j-bisimulation 
Z CW X W' such that (w, w') G Z? One of the main results from the model theory of basic 
modal logic, viz. the Hennesy-Milner theorem (cf. [2], Theorem 2.24) says that this question 
can be answered positively, at least when the models are assumed to be image-finite. This 
theorem can easily be generalized to epistemic plausibility models: 

Definition 12. Consider an epistemic plausibility model M = {W,{^i}i^G,{^i,w}f^G^,V)- 
We say that M is image- finite if for all i G G and all w £W, the set [w],^. is finite. 

Theorem 13. Consider two image-finite models M = {W, {~i}jeG, {<i,w}TiG^ , V) and M' = 
{W',{^[}i^G,{<'Ln^'}7^G^' Then for aU states w e W and w' e W, iiM,w ^ ip ^ 
M'jw' 1= (p for all ip G C{K,B'^) (we will write w =|^^^c| w'), then w and w' are {K,B'^}- 
bisimilar. 
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Proof. We use the trick of the Hennessy-Milner theorem for basic modal logic, viz. we show 
that ={x,Bc} is itself a {K, i?'^}-bisimulation. If w =|^^^c} w', then the atoms clause is 
trivially fulfilled. We now focus on the zig-clauses of Definitions [g] and [s] (extended to C{K, B'^) 
instead of just C{B^), cf. supra); the zag-clauses are treated completely analogously. 

Zig-clause for K -bisimulation. Suppose that w ={k,B''} and w ~i v; we will show that 
there is a f ' G W' such that v =|^^^c} v' and w' ~'j v' . For a reductio, suppose that this is 
not the case; so for all v' G [w']^i, we have v ^{k,B''} (*)• If [^']~' = 0, then M', w' |= -fCj-L, 
so since w =f^x,B'^] w' , we get M, u) ^ -f^j-L, which contradicts v G [w\r^^. Hence [w']^' / 0. 
Since M' is image-finite, [w']^{ is finite, say [w']^' = {w'^, . . . , t'^}. We can now rephrase (*) as 
follows: for all fc G {1, . . . , n}, there is a v^fc G C{K, B^) such that M, v |= ^pk and M', ^ c^^. 
It now easily follows that M, w |= ^Ki^{ipi A • • • A ipn), and yet M', u;' ^ ^Ki^{ipi A • • • A 
Since ifi, . . . ,ipn G /^(i^, -B'^), also -iErj-i(v7i A- • -Aifn) £ >C(-fC, S'^). This contradicts it; ={x,_B<:} 



w' . 



Zig-clause for B'^ -bisimulation. Consider an arbitrary formula a G C{K, B'^) and suppose 
that w =^j^^Bcj w' and v G Min<. ^,([[0;]]^ n [ti'l^J. We will now show that there is a G W 
such that V =sx b'^} v' and v' G Min</ (|a|^' n [w']^'). For a reductio, suppose that 
this is not the case; so for all v' G Min</ (HaJ^' H we have v ^\kb<'\ v' {**). If 

Min</ daf^' n K]^') = 0, then M', w' |= so since t(; b-\ w' , we get M, w \= Bf±, 

which contradicts v G Min<,. ^([aj^n H^J. Hence Min<, Haf^' D K]^') / 0. Since M' is 
image-finite, [w']^^', is finite, so |a|^ n [w']^' is also finite, and so Min</ H [u;']^/) is 

also finite — say Min</ ([[a]]^'n[u;']^') = {v[, . . . , v!^}. We can now rephrase (**) as follows: 

i,ii)' ^ 

for all k G {!,... ,Tn}, there is a (^fe G C{K,B^) such that M, t> |= (pk and M',f^ ^ 9?;^. It 
now easily fohows that M, w |= -^Bf^{ipi A • • • A and yet M', \/= ^Bf^{ipi A • • • A 
Since a, 991, . . . , £ ^^{K,B'^), also A ••• /\ ipm) G C{K,B^). This contradicts 

One of the main uses of bisimulation is studying (un) definability results. We will now 
illustrate this by proving two undefinability theorems. Both of these theorems can be seen as 
tying up some loose ends, in the sense that the results were expected, but not yet explicitly 
proved in the existing literature. 

Theorem 14. Conditional belief cannot be defined in terms of knowledge and safe belief]^ 

Proof. For a reductio, suppose conditional belief is definable in terms of knowledge and safe 
belief. Consider the formula B^q. Since conditional belief is definable in terms of K and B^ , 
there is a formula G C{K,B'^) such that M, u; |= B^q -H- ip for all epistemic plausibility 
models M and states w. 

Now consider the models M and M' pictured below (we focus on one agent i, and drop 
agent subscripts for the sake of readability). It is easy to check that the dotted line Z is 
a {i^, i?'^}-bisimulation. Since ip G C{K, B~^), it follows by Theorem [9] that M.,w |= (p iff 
M', w' 1= 93, and hence also M,w^ BPq iff M', w' \= BPq. 



This theorem does not contradict Theorem 



27 



since that definabihty theorem holds for a restricted class 
of epistemic plausibility models, whereas this undefinability theorem holds for the entire class of epistemic 
plausibility models; also note that the 'counterexample models' used to prove this theorem do not belong to 



the restricted class of Theorem 27 
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M 



n w]. 



Since w v and v ^y, w, we have w,v ^ Mm<^^{w, v}, and hence Min<^ 
M.m<^{w,v} = {w,v}. Analogously Min</ n = {w',v'}. Since M.,w \= q and 

M, V 1= q, we get M, w |= B^q, but since M', v' ^ g, we get M', w' ^ S^g; contradiction. □ 

Theorem 15. Safe belief cannot be defined in terms of knowledge and conditional belief. 

Proof. For a reductio, suppose safe belief is definable in terms of knowledge and conditional 
belief. Consider the formula B~^p. Since safe belief is definable in terms of knowledge and 
conditional belief, there is a formula ip £ C{K, W^) such that M, w \= B~^p o ip for all 
epistemic plausibility models M and states w. 

Now consider the models M and M' pictured below (we focus on one agent i, and drop 
agent subscripts for the sake of readability) . It is easy to check that the dotted lines Z form a 
ET-bisimulation. We claim that they also form a i?^-bisimulation (this claim is proved later). 
Since G C{K, B'^), it follows by the first part of Theorem 
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that M,w\= (fiS 



l',w' 



and hence also M, w |= B^p iff M', w' |= B^p. However, using Definition [2| one easily checks 
that M, w 1= B~^p, while M', w' |^ B^p; contradiction. 





We now prove the claim that Z is a bisimulation. Note that for any x £ {w,v} and 
X C {w,v}, it holds that Min<^(X) = X and [x]^ = {w,v}^ Hence we get that y G 
Min</([[a]]^ n [x]^) iff y G laf* n [x]^ iff M,y \= a. Analogously, we show that y' £ 
Min</ ([ce]]^ H [x']^') iff M', y' |= a. We already know that w and w', and v and v' agree on 
all atoms. Hence, reconsidering Definition^ the following remains to be shown: 



Va E CiK, B"") : if {x, x') G Z and M, y |= a, then 3y' E W : (y, y') E Z and 
Va E C{K, B") : if {x, x') E Z and M', y' \= a, then 3y e W : (y, y') E Z and M, y 



a 



a 



Note that the condition {x,x') £ Z is vacuous. Furthermore, since Z = {{w,w'), {v,v')}, 
this can be rewritten as the following 



Claim. Va E C{K, B^) 



a 



a and 



a 



This claim is easily proved by induction on the complexity of a. We treat the cases for 
knowledge and conditional belief. If a = Kip, then we have: 

^Although this is not explicitly represented in the picture, we are assuming that <„= {{w,w), {v,v)} and 

<v'= {{W^W'), {v',v')}. 
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M, w 1= Kip 4^ Vx G ■.M,x\= if 

4^ M,w \= (f and M,v \= ip 

M', w' \=f and M', v' \= <p (IH) 
4^ Vx' G K]^/ : M',x' 1= 99 

and similarly M, u |= Kip 4^ M', |= Kip. If a = B'^ip, then we have 

M,u;|=5^(/j 4^ Vx G Min<^(M^n H~) : M,x ^ 

4^ Vx G : M, X 1= (/J 

44> Vx G : M, X ^ M, X 1= (/? 

4^ M,w \= ip ^M,w \= ip and M, w ^ ?/; M, 

4^ M', w' 1=4^^ m', w' \=ip and M', v' \= ip ^ 

4^ Vx' G : M',x' 1= V 

4^ vx' G ivr' 

4^ Vx' G Min</ (iVr' n K]^/) 
4^ M, w 1= B'^c^ 

and similarly M, |= B''f'ip 4^ M', v' |= (recall Footnote [5|. This finishes the proof of the 
claim, and thus also of Theorem 15 □ 



V \= ip 
M',v' 1= ip 



r,x' 1= ip 



l',x' 1= tp 



,x' \=ip 



(cf. supra) 
(IH) 
(cf. supra) 



4 Structural bisimulations 

We already noted in the previous section that the notion of i?'^-bisimulation introduced in 
Definition [8] is much more intricate than the other notions. We will now argue that this 
definition is unsatisfactory for both theoretical and practical reasons. 

On the theoretical level, since Definition [s] involves universal quantification over C{B'^), 
it is not strictly structural. Rather than stating conditions on ~j and <i^uj (as is done in 
Definitions [6] and [7] of bisimulations for knowledge and safe belief), it essentially involves 
truth sets of (arbitrary) formulas. A related issue is that this definition of bisimilarity for 
models cannot be turned into a definition of bisimilarity for frames by simply dropping the 
'atoms' clause (as can be done with Definitions [6] and [7| : it depends on truth sets of formulas 
([[a|^ and [[a|^ ), and thus also on the concrete valuations of the models M and M'. 

Practically speaking. Definition [8] makes it often very difficult to prove that two given 
epistemic plausibility models are actually i3'^-bisimilar. In the appendix of [4J, induction on 
the complexity of a (with a cleverly strengthened induction hypothesis) is used to establish 
that the zig- and zag-conditions of Definition [8] hold for all formulas a. However, this ap- 
proach is geared towards proving one particular i?'^-bisimilarity result (about two artificially 
crafted models) , and cannot easily be generalized to the general case (proving 5^-bisimilarity 



of arbitrary models). Similar remarks apply to our proof of Theorem 15 Furthermore, re 



call that one of the main goals of introducing bisimulations is that they allow us to prove 



equivalence results. For example, in Theorem 15, we want to show that the two pictured 
models are {i^T, B'^j-bisimilar, and then (using the first part of Theorem 11) conclude that 
they are £(-fC, i?'^)-equivalent. However, note that while establishing the iJ'^-bisimilarity, we 
ended up proving a separate claim, which just is the original C{K, i3'^)-equivalence result we 
were looking for. This seems to be some kind of practical 'circularity' (we want bisimilarity 
to get equivalence — but to get bisimilarity, we already need equivalence), which renders the 
current notion of S'^-bisimulation practically useless. 
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We will now propose two different solutions to this problem, and explore and compare their 
advantages and disadvantages. Both solutions involve reducing conditional belief to other 
modalities which have more standard notions of bisimulation. The first approach involves 
both extending the language and putting some mild constraints on the epistemic plausibility 
models. The second approach puts more heavy constraints on the models, but does not need 
to extend the language. Both solutions have in common that we end up only needing fully 
structural notions of bisimulation, without any universal quantification over formulas. 

4.1 Adding a new modality 

The first approactj^ combines language engineering and putting some mild constraints on the 
models. These constraints are captured by the following definition: 

Definition 16. An epistemic plausibility model M = (VF, {<j,io}^^, ^) is called 

uniform iff the plausibility relations are uniform within epistemic equivalence classes, i.e. iff 
for any i £ G and u G W: if w ~j u then <j.^ = <i^v 

This is a natural condition to impose on epistemic plausibility models: it leads to the (in- 
tuitively plausible) epistemic/doxastic introspection principle that agents know their (condi- 
tional) beliefs. Furthermore, uniformity is a dynamically robust notion, in the sense that if 
an epistemic plausibility model is uniform, then after it has undergone some dynamics, it is 
still uniform. 

Tlieorem 17. If an epistemic plausibility model M is uniform, then M |= Bfip — t- KiBfip. 

Proof. Consider an arbitrary state of M and suppose that M, w |= -Bf v?. Consider an 
arbitrary v £ [w]^^; it now suffices to show that M, f \= Bfip. Since M.,w |= B"ip, we 
have Min<. ^([aj^ n [w]r^J C lip^^ (f). Since w ~j v, we have [w]r^^ = [u]^. (because 
~i is an equivalence relation) and <i,w = ^i,v (because M is uniform). Hence (f) becomes: 

Min<,,„(Iar n [vU) Q M", ergo M,v \= Bfip. □ 

Theorem 18. If an epistemic plausibility model M is uniform, then so are Wllcp and M 

Proof. Consider a uniform model M. We treat the case of public announcement. Consider 
arbitrary states w,v of Mlip and suppose that w v. By Definition [sj we get that w ~i v. 
Since M is uniform, it follows that <i,^ = <i,^. Hence also < = <i,^ <^{yf^ x M^) = 
<i^y r\{\(p^ X [[(/jI^) = < The case of radical upgrade is completely analogous. □ 

Uniform epistemic plausibility models will become very important later on. First, however, 
we need to set up some other things. For any agent i £ G and state w in a plausibility model, 
let us abbreviate <j^^ := <i^w — ^i,w and =i^w ■= ^i,w H >j^^ (so x <j^^ y iff x <i^w V and 
not y <i^w x; and x =i^w y iff a; <i,w U and y <i^w x). Note that since <i^w is a pre-order and 
thus not necessarily antisymmetric, it is possible that x =i^w y and yet x ^ y. One can easily 
verify the following fact, which expresses minimality in terms of the strict ordering <: 

Fact 19. Consider an epistemic plausibility model M = {W, {^i}i(zG, {<i,w}f^G^ ,V) , a set 
X QW and a state w £W. Then for any state x G W, it holds that x G Min<. ^(X) iff 
X £ X and there is no y G X such that y <i^w x. 

^This approach is based on a suggestion by Johan van Benthem and Davide Grossi. 
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We now extend our language with a modality [>i] to talk about this strict version of the 
plausibility order. As in Definition [2| the semantics for this modality is relativized to the 
epistemic equivalence classes: 

Definition 20. Consider an epistemic plausibility model M and state w; then 

M, w ^ [>i]ip iff \/v e [w]^. : V <i^w w ^M,v \= if 

We now show that adding this new modality [>i] as a primitive operator is justified, in 
the sense that it cannot be defined in even the richest language of the previous section: 

Theorem 21. The modality [>j] cannot be defined in C{K, B'^, B^). 

Proof. We focus on one agent i, and drop agent subscripts for the sake of readability. Consider 
the models pictured below (we assume that all proposition letters are made true everywhere: 
V{p) = {w, f }, V'{p) = {w' , v'} for all p E Prop). 




We first prove an auxiliary claim about the right model M': 

Auxiliary claim. For all ip £ C{K, B", we have M', w' \= f iS M' , v' \= ip. 
Proof of auxiliary claim. We prove this by induction on the complexity of 93. The base case, 
for proposition letters p, is true because V'{p) = {w' , v'} for all p £ Prop. The Boolean cases 
are trivial. We now focus on the three epistemic/doxastic operators: 

• = Kip. Since [w']^> = {w',v'} = [v']r~^/, we have: M',w' |= Kip iff {M',w' |= 
ip k MP, v' 1= V) iff M', v' 1= Kip. 

• Lp = B^ip. Since [w']r^i = {w' ,v'} = [f']^' and = {w' ^v'} x {w' ,v'} = <^,, we have: 
M', w' 1= B+ip iff (M', w' \=ip h M', v' [= ip) iff M', v' [= B+ip. 

• ip = B'^ip. Since K]^/ = [v'U> and <', = <',,we have: M', w' |= B'^ip iff Min</ (H'^'n 

[w'U') c ivr' iff Min<, (M"' n [v'U>) c m^' ism',v' 1= B'^ip. 

This finishes the proof of the auxiliary claim about M'. We now use this to prove that M 
and M' are statewise C{K , B"^ , B'^)-equiva\ent: 

\f(p e C{K, B") : (M, -u; 1= 99 <^ M', w' \= ip) and (M, v \= <p ^ W , v ^ (/?) 

We prove this again by induction on the complexity of (p. The base case holds because 
= {u),u} and Vij)) = for all p G Prop. The Boolean cases are trivial. We now 

focus on the three epistemic/doxastic operators: 

• ip = Kip 

Since [tf]^ = {w,v} and [w']r^' = {w',v'}, we have 

M, w 1= Kip <J4> (M, w\=ip and M,v \= ip) 

(M',ti;' 1= Ip and M',^' |= ip) (induction hypothesis) 
^ m',w'\=Kip 

Analogously we prove that M, w |= Kip iff M', v' |= Kip 
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Since yx £ W : x <w w 4^ x £ {w,v} and Vx' G W : x w' <^ x' E {w',v'} (and 

[w]^ = {w,v} and [w']^i = {w',v'}), we have 

M, li; 1= <^ (M, w \= i{j and M, u |= ip) 

■4^ {M.',w' t= and M.',v' \= i/j) (induction hypothesis) 

4^ M', w' \= B+Tp 

Since ^x e W : x <y v 4^ x = v and Vx' G T^' : x v' 4^ x' e {w',v'} (and 
= {w,v} and = {it;',^'}), we have 

M,v\= B+i/; <^ M, u 1= V 

<;4> M', f ' 1= (induction hypothesis) 

(M', w' 1= and M', v' \= ip) (auxihary claim) 

4^ M', v' \= B+ip 

• (p = B'^tp 

We make a case distinction: 

Case Ave {af^ 

Then by IH: M.',v' \= a. By the auxiliary claim also M',w' \= a, so laf*' = 
{w\ v'}. Since v' ^' , w' and [w%' = {w', v'} we get that Min</ daf^' n [w'U') = 

{w', v'}. Furthermore, since M,v \= a and v <w w, we have Min<^ (|q;]]'^ fl [w]^) = 
{v}. Hence we have 
M,w\= B'^ij; ^ Min<„ ([[al'^ n [w]^) C lijjf^ 

^ {v} c [vr 

4^ M,v\=ijj 

4^ 'M',v'\=tp (induction hypothesis) 

(M', w' 1= ip and M', v' \= tp) (auxiliary claim) 

^ {w',v'} cyjf^' 

^ Min<, ([ajM' n M^') C M"' 
M', w' \= B^'ip 

Analogously we prove that M,v \= B°'i/: iff M', \= B'^tp. 
Case B 

Then by IH: M',i;' ^ a. By the auxiliary claim, we get Wl',w' ^ a. By IH again, 
we get M,w^a. Now we have laf* = ill = laf^' , and thus 
M,w\= ^ Min<^ (|a|M n H^) C {ipf^ 

4^ Min<J0)C[Vr 

^ Min<, (0) C [[j/,|M' 

^ Min<, (|ar n M-') C [V'r 
4^ M', w' \= B'^ij; 
Analogously we prove that M,v \= B'^tp iff M', \= B'^tp. 

We have now shown that for ah ip G C{K, B'^ , B'^), we have M, |= <^ iff M.',w' \= ip. Yet 
one easily verifies that M,w \= (>)T, while M',w' y= (>)T (where, of course, (>) = ->[>]-'). 
Hence, [>i] is not definable in C{K , B~^ , B'^) . □ 
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The [>]-modality is actually so expressive that, together with the knowledge operator, it 
is able to define the notion of conditional belief — at least, when we restrict ourselves to the 
uniform epistemic plausibility models introduced at the beginning of this subsection. 

Theorem 22. For ah uniform models M, it holds that M |= Bftp o Ki{{a A -■(>i)a) — )• if). 

Proof. Consider an arbitrary uniform model M and a state w of M. Note that for any 
X G [w]r^^, it holds that [w]^- = [x]^. (since ~j is an equivalence relation) and that <i^w = <i,x 
(since M is uniform). This justifies step (J) below: 

M, w 1= Bf^ 

' -.xG Min<, „ (H" n H~J ^M,x^^ 

(Fact 





yxeW -.xG Min<,„([[an 


n [wU) 


M,x\= if 










Vx G : (x G n [w]^^ 


and -'3y £ 




• y ^i,w 


x) =>M 


[, X = 99 




Vx G : (M, X \= a and 


^3y G 


• in ^i,w X 


and M, y 


1= «)) = 


4> M, X ^ 




Vx G [w]'^t '■ (M, X \= a and 


^3y G [x]^. 


■ {y <i,x X 


and M, y 


= «)) - 


> M, X = v? 




Vx G [w]r~^^ : (M, X \= a and 


M,x ^ {>i) 


q) M, X 


1= 








M, w 1= Ki{{a A ^(>i)a) -> 













□ 

We now introduce the notion of [>]-bisimilarity, which — as desired — is fully structural: 

Definition 23. Given epistemic plausiblity models M = (VF, {~i}ieG5 {<j,io}i^^5 ^) and 
M' = {W, {~'JieG, {<'i,^n'}iiG^' ^ ; a relation ZCW xW' is a [>]-bisimulation iff 

• if {w, w') G Z, then for all atoms p: w £ V{p) w' £ V'{p) 

• if {w,w') G Z and w v and f <i^w w, then there is a f ' G W such that {v,v') G Z 
and It;' ~'j f ' and v' <'■ ^, tt;' 

• if {w,w') £ Z and tt;' ~'j v' and <'• ^, w', then there is a u G such that {v,v') £ Z 
and w V and v <iw w 



Part 1 of Theorem 24 shows that this is the right notion of bisimulation. Furthermore, we 
get combined notions of bisimulation in the obvious way. In particular, {K, [>]}-bisimulations 
are combined K- and [>]-bisimulations; since both of the latter notions are purely structural, 
also {K, [>]}-bisimulation is structural. Part 2 of Theorem 24 is the analogue of part 1 for this 
combined notion. Most importantly, part 3 states that when we restrict ourselves to the class 
of uniform models, we can get equivalence for conditional belief by means of a structural 
notion of bisimulation. Finally, part 4 says that if we restrict to uniform image-finite models, 
then (structural) {K, [>]}-bisimilarity implies {i^, i3^}-bisimilarity (which involves universal 
quantification over formulas). 

Theorem 24. Consider two epistemic plausiblity models M = (VF, ^) 
and M' = {W, WJieG, {<'i,^n'}%G^' '^') ^ and a relation Z<ZWxW'. 

1. If Z is a [>]-bisimulation, then for all ip £ £([>]) and for all {w,w') £ Z, it holds that 
M, w\= ip 4^ M', w' 1= ip. 



^Actually for C{K,B'^) — but this is no heavy restriction, since it is natural to study both notions simul- 
taneously anyway. 



13 



2. If Z is a {K, [>]}-bisimulation, then for all <p G C{K, [>]) and for all {w,w') G Z, it 
holds that M, w \= if <^ M' , w' \= if. 

3. If M and M' are uniform, and Z is a {K, [>]}-bisimulation, then for all (p G C{K,B^) 
and for all {w, w') G Z, it holds that M,w\= ip 4^ M' , w' |= if. 

4. If M and M' are uniform and image-finite, then for any states w and w' G W\ we 
have that if w and w' are {K, [>]}-bisimilar, then they are {K^ i?'^}-bisimilar as well. 

Proof. 1. This is easily proved by induction on the complexity of p. We only treat the case 
for [>j]. Suppose that {w,w') G Z and M, w ^ [>i]v; show that also M',w' |= [>j](/3. 
Consider an arbitrary v' G W and suppose that w' ~'j v' and v' <^^/ w'- By Definition 23 
there exists a v & W such that (t;, f') G Z and w v and t; <j^^ Since M, w |= [>i]v3 anc 
w V and f <j^^ we get M.,v \= ip. Since (t;, ?;') G Z, we get by the induction hypothesis 
that also M.',v' |= (p. The other direction is completely analogous. 

2. This follows immediately from part 1 of this theorem and part 1 of Theorem [9| 

3. Consider uniform models M and M', a {K, [>]}-bisimulation Z, and {w,w') G Z. Now 



consider an arbitrary p G C{K,B^). Since M and M' are uniform, Theorem 22 allows us 
to systematically delete all occurences of conditional belief operators in p, and replace them 
with K- and [>]-operators, thus obtaining a formula p-^ G C{K, [>]) such that M |= 99 o p-^ 
(t) and M' \= p ^ p> {X)f\ Now we get 

m,w\=p <^ M,w\= p> (t) 
<^ M' ,w' \= p'^ (part 2 of this theorem) 
^ M',w'^p (t) 

4. Assume that w and w' are {-fC, [>]}-bisimilar; so there exists a {K, [>]}-bisimiluation 
Z <ZW X W' such that {w, w') G Z. Since the models are uniform, we get by part 3 of this 
theorem that M, w \= p 4^ M', w' |= p for all p G C{K, B^). Since the models are image-finite, 



we get by Theorem 13 that w and w' are {K, B'^j-bisimilar. □ 



We finish this subsection by providing an overview of the first strategy to solve the main 
issue of Section [3] (viz. finding a structural notion of bisimulation for conditional belief) and 
evaluating its advantages and disadvantages. 

This strategy has two components. The first component is to impose an extra condition 
on epistemic plausibility models, viz. uniformity. We argued that this is relatively harmless, 
since it can be given an intuitive motivation in terms of doxastic/epistemic introspection, and 



because it is dynamically robust (cf. Theorems 17 and 18). The second component involves 
what van Benthem calls "redesigning one's language to fit more standard bisimulations" [6l 
p. 310]. We introduced a new modality [>] and showed that together with knowledge, it can 



define conditional belief (for uniform models) (cf. Theorems 21 and 22). We then used the 



structural notion of {K, [>]}-bisimilarity to establish £(-fC, i?'^)-equivalence and even {K, B^}- 



bisimilarity itself (cf. Theorem 24). 



The main disadvantage of this approach lies in its second component: the [>]-operator 
was introduced for the sole purpose of defining conditional belief (while maintaining a struc- 



^Making this idea fully formal would require recursively defining a translation function r: C{K,B'^) — > 
C{K, [>]), with as its key clause r^Bfip) := Ki{{a A -^{>i)a) — > ip), and then proving that for uniform models 
M, we have M |= o r^ip). 
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tural notion of bisimulation) . In itself, however, it does not seem to have any intuitive 
epistemic/doxastic reading]^ Therefore, this solution ends up looking a bit ad hoc. 

4.2 Assuming connectedness 

The second approach tries to keep the advantages of the first one, while avoiding its major 
drawback, viz. the ad hoc introduction of new operators. The basic idea is that, with an extra 
condition on the epistemic plausibility models, conditional belief can be reduced to knowledge 
and safe belief. Hence, the S^-operator plays the role of the [>]-operator in the previous 
approach, but unlike the [>]-operator, it does have an intuitive doxastic interpretation. The 
extra condition on the models that we need is local connectedness: 

Definition 25. An epistemic plausibility model M = {W,{^i}i^G,{^i,w}f^G^ ,V) is called 
locally connected iff for all agents i G G and states w,v G W it holds that ii w v, then 
w <i^w V or V <i^y, w. 

Whether this is a natural condition is a bit more doubtful than in the case of uniformity. 
At least, local connectedness is dynamically robust: 

Theorem 26. If an epistemic plausibility model M is locally connected, then so are Wllip and 
Mil (f. 

Proof. Consider a locally connected model M. We first treat the case of public announcement 
of (p. Consider arbitrary states w,v of Mltp and suppose that w ^- Definition jsj we 
get that w ~j V. Since M is locally connected, it follows that w <i^w v oi v <i^w w- Since 
'^'i'u, = ^i,w (cf. Definition 3), we get that also w <j'^ v oi v w, as desired. 

We now treat the case of radical upgrade with ip. Consider arbitrary states w,v oiM^l tp 
and suppose that w v. By Definitionji, we get that w ~i v. Since M is locally connected, 
it follows that w <i^w v or v <i^w w. We now make the following case distinction: 

• M.,w \= (p, M.,v \= p. Then by Definition jsj w <f'^ v iS w <i^w v, and v <f'^ w iff 
V <i,w w. Since w <i^w v or v <i^w w, it follows that w v or v w, as required. 

• M, w ^ p, M, V ^ p. Analogous to the previous case. 

• M,w \= p,M,v ^ p. Then by Definition [sj w v. 

• M, w ^ p, M, V 1= p. Then by Definition jsj v w. 

□ 

We now show that, when we require the models to be both uniform (cf. the previous 
subsection) and locally connected, then conditional belief can be defined in terms of knowledge 
and safe beliefP^ 

Theorem 27. For all uniform and locally connected models M, it holds that M |= B^p -H- 
{k,a^k,{a^B+{a^p))). 

^Cf. "The intuitive meaning of these operators [such as [>], LD\ is not very clear, but they can be used to 
define other interesting modahties, capturing various 'doxastic attitudes'.", [T] p. 32]. 

^"A similar definition was already proposed in the context of modal conditional logics of normality; 
cf. Boutilier[3 p. 104]. 
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Proof. Consider an arbitrary uniform and locally connected model M and a state w of M. 
We will only work in the model M, and can therefore write x \= ip instead of M, x \= ip. We 
prove both directions: 

• w\= Bfif {Kia Ki{a A B+{a if))) 

Assume w |= Bfip and w \= Kia; we show that w |= Ki{a A Bf{a — )• Lp)). Since w |= 
kia, we have that laf* n [w]^, / 0. By well-foundedness of <i,^, also Min<^^ ([[aj" n 
7^ ^- Therefore we can pick a state x S Min<.^ ([aj^ n [wJ^^J. Note that 
w X and x \= a. Hence, if we can show that also x |= Bf{a — )• then we get 
w 1= Ki{a A Bf{a tp)), as required. 

We now prove that x |= Bf{a — )• <p). Consider an arbitrary y G [x]^. and suppose that 
y <i X X and y |= a; we will show that y |= Since w \= Bfip, it suffices to show that 
yGMin<,,JIarnM^J. 

We already know that y \= a and since y x and x ^i w, also y ^i w; hence 
y G \pi^ n We now establish the <j^tt,-minimality of y in n [tL']^^. Consider 

an arbitrary z G [a]]^ H [w]^. and suppose that z <i^^ y; we show that y <i^u) z- Since 
y ^i,x X and a; ~j we get by uniformity that y <i^w x. Together with z <i^w U, we 
get z <i^u! X. Since z G [[a]]^ n [w]^^ and x is <j^u;-minimal in [[aj^ n [i^]^^, it follows 
that x <i^w z. Together with y <j^u, x, this implies that y <i^w z. 

• {kia ki{a A B+{a if))) Bfip 

Assume w |= k^a — )■ ki{a A B^{a — )• ip)) (*); we show that w |= -Bfv'- Consider 
an arbitrary x G Min<^ ^ ([aj^ n [it^J^J; we will show that x |= (p. Note that since 
X G [aj^ n [w]r^^, we have ^ k^a, and thus by (*) we get w |= -ftrj(a A B^{a ip)). 
Hence there is a state y G [w],-^^ such that y |= a and y |= — )■ (p)- 

We now show that x <i^y y. Since x ^i w and y ~j tt;, we get that x ~j y. Since M is 
locally connected, it follows that x <i^y y or y <i^y x. In the first case, we're done. Now 
suppose that the second case obtains. Since y ~j w, we get by uniformity that y <i^w x. 
Since y G |q|^ n [w\r^^ and X is <j^^-minimal in [[ct]]'*''' H ["ifj^j, it follows that x ^i^w U- 
Again by uniformity, we get x <i^y y. 

We have proved that x <i^y y. Also recall that x ~j y. Hence, it follows from y |= 
Bf{a —7- ip) that a; |= a — )• 93. Since x \= a we get that x |= ^p. 

□ 



Using this definability result, we can now immediately prove the analogon of Theorem 24 
of course, since we did not have to introduce a new modality and a new notion of bisimulation 
corresponding to it, we only reformulate its third and fourth part. The importance of this 
is that when we restrict ourselves to the class of uniform and locally connected models, we 
can get equivalence for conditional belief by means of a structural notion of bisimulation, 
viz. {K, i?+}-bisimulation. Furthermore, if we restrict to the uniform, locally connected 
and image-finite models, then (structural) {K, i?"'"}-bisimulation implies {K, i?^}-bisimilarity 
(which involves universal quantification over formulas). 

Theorem 28. Consider two epistemic plausiblity models M = (VF, {~j}jeGi {<i,«i}i^'G^) ^) 
and M' = {W, {~'Ji6G, {<'i,^'}7iG^\y') . and a relation Z(^W xW. 
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1. If M and M' are uniform and locally connected, and Z is a {K, i?^}-bisimulation, then 
for all If £ C{K, B+, B") and for all {w, w') G Z, it holds that M, u> |= 99 4^ M', w' \= if. 

2. If M and M' are uniform, locally connected and image- finite, then for any states w 
and w' G W', we have that if w and w' are {X, i?"'"}-bisimilar, then they are {K,B'^}- 
bisimilar as well. 

Proof. 1. Consider uniform and locally connected models M and M', a {K, i?^}-bisimulation 
Z, and {w,w') G Z. Now consider an arbitrary ip G C{K, B^ , B^). Since M and M' are 



uniform and locally connected, Theorem 27 allows us to systematically delete all occurences of 
conditional belief operators in ip, and replace them with K- and i^^-operators, thus obtaining 
a formula 93+ G C{K, B+) such that M |= (/? o (f) and M' |= o 99+ (t). Now we get 

M,w\=ip <^ M,w\=ip~^ (t) 



44> M',u;' \= ip^ (second part of Theorem 11) 

<^ m',w'^^ (I) 

2. Assume that w and w' are {i^, i?+}-bisimilar; so there exists a {A', S+}-bisimiluation 
Z QW X W' such that {w,w') G Z. Since the models are uniform and locally connected, we 
get by part 1 of this theorem that M.,w \= ip <^ 'M'jw' |= (p for all tp G C{K,B^). Since the 



models are image-finite, we get by Theorem 13 that w and w' are {K, i?^}-bisimilar. □ 



Just as we did in the previous subsection, we now provide an overview of the second 
strategy to solve the main issue of Section [3j This approach reduced conditional belief to 
knowledge and safe belief, which are both intuitively clear epistemic/doxastic notions. There- 
fore, the main issue of the first approach, viz. the ad hoc character of its introduction of the 
[>]-operator, is avoided. In order to get the desired results about C{K, i?'^)-equivalence and 



{X, S^j-bisimilarity (cf. Theorem 28), we required the epistemic plausibility models to be 
not only uniform, but also locally connected. The uniformity constraint inherits of course all 
of its justifications (intuitive epistemic/doxastic interpretation and dynamic robustness) from 
the previous subsection. However, the new constraint, local connectedness, seems to be less 



motivated: while it is also dynamically robust (cf. Theorem 26), it might not have as intuitive 
an interpretation as the uniformity constraint. 



5 Dynamics and bisimulation 

In this section, we will make some remarks about the interaction between bisimulation and 
dynamic model changes. First, however, we need to decide which approach to conditional be- 
lief is to be adopted. Throughout this paper, we proposed three approaches: a non-structural 
one in Section [Sj and two structural ones in Section |4j We already argued extensively that the 
structural approaches are to be preferred over the non-structural one. Of the two structural 
approaches, however, none seemed to be highly preferable over the other. For reasons that 



will become clear later, we will henceforth adopt the approach developed in Subsection 4.2 



However, one should keep in mind that this section could easily be rewritten in terms of the 



approach developed in Subsection 4.1 



The main use of bisimulations is to prove /^-equivalence of two models (for some lan- 
guage C). Fact [5] tells us that adding the dynamic operators [Ic^] and [-(| (p\ to the language 
C{K, B^ , B^) does not increase its expressivity: using the reduction axioms, every formula 
of the dynamic language C{K, B^ , B'^, !, ff) can be rewritten as an equivalent formula of the 
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original static language C{K,B^,B'^). Thus, information about what will be the case after 
some change has taken place can be pre-encoded in the static language. We will now combine 
this pre-encoding strategy with Theorem [28} 

Theorem 29. Consider two uniform and locally connected epistemic plausiblity models M = 
{W,{^i},^G,{<i,vj}Ti^,V) and M' = {W , {^'^,^g, {<'i,n,'}T^G^' X) , states w e W and 
w' G W, and a {iC, i?"''}-bisimulation Z W x W' such that {w,w') G Z. Furthermore, 
consider an arbitrary formula (/? G C{K, , B^); then: 

1. lim,w\=(f and M', w' \= f, then VV' G C{K, B+ , 5=) : W.Lf, w \= ip ^ M'lif, w' \= i/j. 

2. yi/j G £{K, B+,B'') -.Mil (p,w\='ilj ^M' it (p, w' \= tp. 

Proof. 1. Consider an arbitrary ip G C(K, B~^ , B^); hence [\(p]tp G C{K, B^ , B'^,l,'{\). Using 
Fact [5] we can find a formula {[l(p]'ipY G C{K, B~^ , B'^) that is equivalent to ip. We now have: 

Mlip, w \= ip 4^ M,w \= [lipjip (since M,w \= <p) 



^ M',w' ^ i[l(p]ipy (part 1 of Theorem 28) 
^ m',w' 

44> M'\ip, w' 1= ip (since M', w' ^ if) 

The proof of 2. is analogous (or even easier, as we don't have to worry about preconditions 
anymore) □ 

We finish by making two remarks. We proved the previous theorem by combining the 
pre-encoding strategy and Theorem [28) Hence, if we would have adopted the first approach 



to bisimulations for conditional belief (i.e. that developed in Subsection 4.1), we would have 
needed reduction axioms for [>j]'0 and [ft 93][>j]V'. These turn out to be almost identical 
to those for safe belief. 

Fact 30. The following are sound with respect to epistemic plausibility models: 

{^^ ^ ([>i](-V? ^ [it A K^iif ^ [it c^]^))) 



The second remark is about the strength of bisimulation. Theorem 28 tells us that bisim 



ulation 'now' implies modal equivalence 'now'. Theorem 29, however, tells us that bisim- 
ulation 'now' implies modal equivalence Hater' (i.e. after the model has undergone some 
dynamic effects). Since both uniformity and local connectedness are dynamically robust 



(cf. Theorems 18 and 26), Theorem [29[ can be repeated to prove that the same holds for 
any sequence of epistemic dynamics (e.g. if M.,w and M'jtu' are {ii', iJ^^j-bisimilar, then 
(((MIvJi) it ip2) it (P3y.(pi,w and {{(M'l^i) f ^2) it (P3y-(pi,w' are £(K, 5+, 5^)-equivalent — 
provided they survive the public announcements, of course). Hence, if two epistemic plau- 
sibility models are bisimilar at one point, then their entire epistemic-doxastic futures are 
indistinguishable. 
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6 Conclusion 



The aim of this paper has been to explore the model theory of epistemic plausibility models, 
which has been largely ignored in the present literature. We focused on the notion of bisimu- 
lation, and proved various bisimulation-implies-equivalence type theorems, a Hennesy-Milner 
type theorem, and two undefinability results. However, our main conclusion is a negative 
one, viz. that bisimulations cannot straightforwardly be generalized to epistemic plausibility 
models if conditional belief is taken into account. We presented and compared two different 
ways of coping with this issue: adding a modality to the language, and putting extra con- 
straints on the models. Finally, we established some results about the interaction between 
bisimulation and dynamic model changes, and commented on the strength of bisimulation to 
establish equivalence 'now and in the future'. 

As this is one of the first papers on the model theory of epistemic plausibility models, 
there is obviously still much work to be done in this area. The main question asked in this 
paper, viz. what is the right notion of bisimulation for conditional belief, has not yet received 
a fully satisfactory answer. More work is needed on comparing the approaches developed in 
this paper, but also on developing still other approaches that have thus far remained under 
our radar. Finally, this paper has focused almost exclusively on the topic of bisimulation, but 
one can also consider other topics from the model theory of modal logic, such as relations 
with first-order logic (via the standard translation), and investigate whether /how they can 
be generalized. 
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